Which measures protect data privacy and client confidentiality in booking data handling?

• A. Access controls, encryption, least-privilege principles, audit trails, regular training, and compliance with applicable privacy laws.
• B. Share booking data with third parties without consent.
• C. Use only a simple password for access.
• D. Rely on clients to protect their own data.

Answer: (A)

Protecting data privacy and client confidentiality in booking systems relies on layered controls that govern access, protection, and accountability. Access controls, encryption, and least-privilege principles ensure that only authorized staff can view data and only to the extent they need it, while encryption protects information both when it’s stored and when it’s transmitted. Audit trails provide a clear record of who did what with the data, helping detect and deter improper access, and regular training keeps everyone aware of privacy policies, security practices, and how to handle sensitive information. Compliance with applicable privacy laws ties all these practices to legal and regulatory requirements, reducing risk and guiding proper data handling.

In contrast, sharing booking data with third parties without consent bypasses privacy protections; relying on a simple password is easily compromised and does not provide ongoing security; and expecting clients to protect their own data places the burden on them and ignores the service provider’s responsibility to safeguard information.